1. Who We Are
Sunday Sauce is an AI-guided cooking application that leads users through regional recipes while teaching food history, culinary culture, and cooking technique, delivered through a voice-enabled AI experience. The App is operated by Profrly LLC, a limited liability company organized under the laws of the State of Texas, United States ("Sunday Sauce," "we," "us," or "our").
This Privacy Policy describes how we collect, use, store, share, and protect personal information through the Sunday Sauce iOS application ("App") and the website at sundaysauce.app ("Site"). By using the App or Site, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the App or Site.
Questions? Contact us at sundaysauceapp@gmail.com
2. AI and Voice Disclosure
Required Disclosure: Apple App Store Review Guidelines §5.1.2
Sunday Sauce uses artificial intelligence and real-time voice technology to deliver its core experience. The specific third-party providers are:
Anthropic, Inc. (Claude API): Powers the AI guide's understanding and text responses. Your inputs are processed by Anthropic. Anthropic does not use your data to train its models without separate consent. See anthropic.com/privacy.
LiveKit, Inc.: Provides real-time audio streaming that transmits your voice during a cooking session. LiveKit processes audio in transit only; we do not instruct LiveKit to store your audio. See livekit.io/privacy.
ElevenLabs, Inc.: Generates the AI guide's spoken voice responses using text-to-speech. Text from the AI's responses is sent to ElevenLabs to produce audio output. ElevenLabs does not receive your voice input or account information. See elevenlabs.io/privacy.
By using Sunday Sauce's voice and AI features, you explicitly consent to this real-time processing by Anthropic, LiveKit, and ElevenLabs. You may withdraw consent at any time by deleting your account; however, withdrawal means you will no longer be able to use the App's core features.
What Happens to Your Voice
Your voice is streamed in real time through LiveKit during a cooking session for speech-to-text processing. We do not store raw audio recordings after a session ends. Temporary in-session transcripts used to maintain conversational context are discarded when the session closes and are never written to our databases or linked to your account.
3. What We Collect
Account Information
| Data | Detail | Purpose |
|---|---|---|
| Email address | Provided at registration | Account login, service communications, account recovery |
| Name | Display name provided at registration | Personalization within the App |
| Password | Stored as a one-way cryptographic hash; never stored in plaintext | Account security |
| User ID | A unique identifier assigned to your account | Service operation and data association |
Sign-in is by email and password only. We do not offer third-party sign-in (e.g., Apple Sign In, Google Sign In).
Subscription and Purchase Information
Subscriptions are managed through RevenueCat and processed by Apple. We do not collect or store payment card numbers, billing addresses, or financial account information. From RevenueCat we receive only: your subscription status, subscription tier, and renewal dates. See revenuecat.com/privacy.
Usage and Interaction Data
| Data | Detail |
|---|---|
| Recipe activity | Recipes viewed, started, and completed; time spent per recipe |
| Regional and cuisine exploration | Regions and cuisines you browse and select |
| Feature interactions | Use of ingredient checklist, family crew setup, step navigation |
| In-app search terms | Search queries used to find recipes or cuisines |
| Session data | Session start and end times, screens visited, navigation paths |
Family Crew Data
The family crew feature allows you to add family members so each person receives age-appropriate cooking directions. We collect only the name or nickname and age range you provide for each crew member. This data is linked to your account and used solely to deliver appropriate in-app content. We do not create separate accounts for crew members or collect additional personal information about them.
Voice and Audio Data
During a cooking session, your voice is transmitted in real time through LiveKit for speech-to-text processing. Raw audio is not stored after the session ends, and no transcript is retained in our systems after the session closes.
Device and Diagnostic Data
| Data | Detail |
|---|---|
| Device information | Device model, iOS version, app version |
| Crash and performance data | Error logs and performance metrics for bug resolution; stored in Supabase and not linked to your identity |
| IP address | Collected at login for security and fraud prevention; not retained long-term |
Data We Do Not Collect
Sunday Sauce does not collect: dietary preferences or restrictions, biometric data, government identification numbers, precise real-time geolocation, camera input, advertising identifiers (IDFA), or any data for advertising or cross-app tracking. We do not offer or use third-party social sign-in.
4. How We Use Your Data
Service Delivery
- Creating and managing your account and authentication
- Delivering AI-guided, voice-enabled recipe and cultural content
- Providing step-by-step cooking guidance and ingredient checklists
- Operating the family crew feature with age-appropriate directions
- Managing your subscription through RevenueCat and Apple
- Sending service-related notifications where you have granted permission
Personalization
- Tailoring recipe suggestions based on your past activity and regional preferences
- Remembering your progress and preferences within the App
Service Improvement
- Analyzing aggregate, anonymized usage patterns to improve App functionality and content
- Identifying and resolving bugs using crash and diagnostic data
Security and Legal Compliance
- Detecting and preventing unauthorized access, fraud, and abuse
- Complying with applicable laws, regulations, and valid legal process
- Enforcing our Terms of Service
- Protecting the rights, safety, and property of Profrly LLC, our users, and others
We do not use your personal data for advertising. We do not sell your personal information. We do not build advertising profiles. Sunday Sauce is ad-free.
5. Legal Bases for Processing (GDPR / UK GDPR)
For users in the European Union and United Kingdom, we process personal data only on valid legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and login | Performance of a contract (Art. 6(1)(b)) |
| Subscription management via RevenueCat | Performance of a contract (Art. 6(1)(b)) |
| AI-guided recipe and cooking delivery | Performance of a contract (Art. 6(1)(b)) |
| Real-time voice processing (LiveKit, Anthropic, ElevenLabs) | Explicit consent (Art. 6(1)(a)) |
| Family crew data | Performance of a contract (Art. 6(1)(b)) |
| Usage analytics and App improvement | Legitimate interests (Art. 6(1)(f)) |
| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing. Where we rely on legitimate interests, you have the right to object (see Section 8).
7. Data Retention
| Data Category | Retention Period | Reason |
|---|---|---|
| Account data (name, email) | Duration of account; deleted within 30 days of account deletion | Service delivery |
| Subscription records | 7 years after subscription ends | Tax and accounting legal obligations |
| Usage and interaction data | 12 months, then anonymized or deleted | Personalization and service improvement |
| Family crew data | Duration of account; deleted within 30 days of account deletion | Service delivery |
| Voice audio | Not stored. Discarded in real time at session end | Not applicable |
| Session transcripts | Not stored. Discarded at session end | Not applicable |
| Crash and diagnostic data | 90 days | Bug resolution |
| Anonymized aggregate analytics | Indefinite (contains no personal data) | Product improvement |
| Data under legal hold | Until resolution of the relevant legal matter | Legal obligation |
Delete your account at any time within the App under Settings → Account → Delete Account, or by emailing sundaysauceapp@gmail.com. Personal data is deleted within 30 days, except where legal retention is required.
8. Your Rights
Rights Available to All Users
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Withdraw Consent: Withdraw consent for voice and AI processing at any time by deleting your account
- Opt Out of Communications: Unsubscribe from non-essential communications at any time
Additional Rights for EU and UK Users (GDPR)
- Data Portability: Receive your personal data in a structured, machine-readable format
- Restriction of Processing: Request restriction of processing in certain circumstances
- Object to Processing: Object to processing based on legitimate interests; we will cease unless we have compelling legitimate grounds
- Complaints: Lodge a complaint with your national data protection authority. UK users may contact the ICO at ico.org.uk
To exercise any right, email sundaysauceapp@gmail.com with the subject "Privacy Rights Request." We will respond within 30 days, or 45 days for complex requests (with notice). We will verify your identity before processing. We will not discriminate against you for exercising your rights.
9. Children's Privacy
Sunday Sauce is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. To create an account, you must be at least 13 years old. Users between 13 and 17 must have parental or guardian consent to use the App.
If you believe a child under 13 has provided us with personal information, contact us at sundaysauceapp@gmail.com and we will delete it promptly.
Family Crew Feature and Minors
The family crew feature allows the primary account holder to assign age-appropriate cooking roles to family members, including minors. Sunday Sauce does not create separate accounts for minor crew members; all crew data is associated with the primary account holder. The account holder represents that they have authority to enroll family members, and that for any minor, a parent or legal guardian has consented to participation. We collect only a name or nickname and age range for crew members, used solely to deliver age-appropriate content.
We comply with the Children's Online Privacy Protection Act (COPPA) and the 2025 COPPA Rule amendments. If we discover we have inadvertently collected data from a child under 13, we will delete it immediately.
10. International Data Transfers
Profrly LLC is based in the United States. All of our third-party service providers (Anthropic, LiveKit, ElevenLabs, RevenueCat, and Supabase) process data in the United States. If you use the App from the EU or UK, your personal information will be transferred to and processed in the United States.
For EU users, we rely on Standard Contractual Clauses (SCCs) as the legal mechanism for these transfers. For UK users, we rely on the UK International Data Transfer Agreement (IDTA) or UK addendum to EU SCCs, as applicable. Our Data Processing Agreements with each provider include appropriate transfer mechanisms.
By using Sunday Sauce from any jurisdiction, you acknowledge that your data may be processed in the United States and that US data protection law may differ from the laws of your country.
11. Security
We implement technical, administrative, and organizational security measures to protect your personal information, including:
- Encrypted data transmission using TLS 1.2 or higher for all data in transit
- Encryption of personal data stored in Supabase at rest
- Hashed password storage (passwords are never stored in plaintext)
- Access controls limiting which personnel can access personal data
- Regular monitoring of systems for security vulnerabilities
No security system is impenetrable and we cannot guarantee absolute security. In the event of a data breach likely to create risk to your rights or freedoms, we will notify you and applicable regulatory authorities within the timeframes required by law (72 hours under GDPR; as soon as reasonably practicable for other jurisdictions).
You are responsible for maintaining the confidentiality of your password. Contact us immediately at sundaysauceapp@gmail.com if you suspect unauthorized access to your account.
12. California Resident Rights (CCPA / CPRA)
This section applies to California residents and supplements the rest of this Policy under the CCPA as amended by the CPRA.
Categories of Personal Information Collected in the Past 12 Months
| CCPA Category | Examples from Sunday Sauce | Collected |
|---|---|---|
| Identifiers | Name, email address, user ID, IP address | Yes |
| Commercial information | Subscription tier and purchase history via RevenueCat | Yes |
| Internet or network activity | Recipe interactions, in-app navigation, search terms | Yes |
| Audio data | Voice audio during sessions (real-time processing only; not stored after session ends) | Temporarily, in transit only |
| Inferences | Regional cuisine preferences inferred from usage patterns | Yes |
| Geolocation data | Precise real-time location | No |
| Biometric data | Biometric identifiers or information | No |
| Sensitive personal information | Dietary restrictions or health-related data | No |
Sale and Sharing of Personal Information
Sunday Sauce does not sell personal information as defined under the CCPA. We do not share personal information with third parties for cross-context behavioral advertising. No "Do Not Sell or Share" link is required; however, you may contact us to confirm your data is not sold or shared.
Your California Rights
- Right to Know: Request disclosure of personal information we have collected, used, and disclosed about you in the past 12 months
- Right to Delete: Request deletion of personal information, subject to legal exceptions
- Right to Correct: Request correction of inaccurate personal information we hold
- Right to Opt Out: Opt out of sale or sharing of personal information (we do not sell or share)
- Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights
Submit requests by emailing sundaysauceapp@gmail.com. We will verify your identity and respond within 45 days. Complex requests may receive an additional 45-day extension with notice. You may designate an authorized agent to submit requests on your behalf.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or the services we use. When we make material changes we will:
- Update the "Last Updated" and "Effective Date" at the top of this page
- Notify you by email to the address on your account at least 14 days before the change takes effect
- Display a prominent notice within the App
For non-material changes, we will update the date and post the revised Policy without prior notice. Continued use of the App after the effective date constitutes acceptance of the updated Policy. Prior versions are available upon request at sundaysauceapp@gmail.com.
14. Contact
For questions, requests, or concerns about this Policy or our data practices:
Profrly LLC
Austin, Texas, United States
sundaysauceapp@gmail.com
We aim to respond to all inquiries within 5 business days. For formal rights requests, see the response timelines in Sections 8 and 12.
EU and UK residents unsatisfied with our response have the right to lodge a complaint with their local data protection authority. UK residents may contact the Information Commissioner's Office at ico.org.uk.